Overview

overview

7

Static

static

3

54d2646c71...18.exe

windows7-x64

7

54d2646c71...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54d2646c71b857096427352f600a1f8e_JaffaCakes118

  • Size

    204KB

  • Sample

    241018-b9pdxszbja

  • MD5

    54d2646c71b857096427352f600a1f8e

  • SHA1

    559a3633c79a4ff05ca1a846b3734fd58f01fb28

  • SHA256

    86e0e4b2c9473aeae7ca4711a396252a751166bb245be24edd58d7e7ef3a8d68

  • SHA512

    2f9b064423860352ce6fb3e0ab9484b1f17cb2e6b365a9bf3fc005deb15c6ec373846d876dbaafdad38d0de586d3fd011e29bc0d7442ccfaa8d22fe1b63259c4

  • SSDEEP

    6144:SQ59e5QiAoARZPOiEb3kJaRLK6pJ/hl4m:n5UyiaLPOiEbSaxbhlZ

Score
7/10
discovery

Malware Config

Targets

    • Target

      54d2646c71b857096427352f600a1f8e_JaffaCakes118

    • Size

      204KB

    • MD5

      54d2646c71b857096427352f600a1f8e

    • SHA1

      559a3633c79a4ff05ca1a846b3734fd58f01fb28

    • SHA256

      86e0e4b2c9473aeae7ca4711a396252a751166bb245be24edd58d7e7ef3a8d68

    • SHA512

      2f9b064423860352ce6fb3e0ab9484b1f17cb2e6b365a9bf3fc005deb15c6ec373846d876dbaafdad38d0de586d3fd011e29bc0d7442ccfaa8d22fe1b63259c4

    • SSDEEP

      6144:SQ59e5QiAoARZPOiEb3kJaRLK6pJ/hl4m:n5UyiaLPOiEbSaxbhlZ

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ExtractDLL.dll

    • Size

      9KB

    • MD5

      d4f87d459a8a538c1d9dd7c12b48a2b0

    • SHA1

      846c6bb0cffa9f385685e5d0556cd90143e7e42b

    • SHA256

      b0a3af70b0d2fe402bd73c04206e8405df1972d664454f3572dd5759141a5b6f

    • SHA512

      351227caeb6dbcdbe3afe720a1fe8fb4a2c413851796e0b47b4b31a927a3ab6efc9eb9cbc025695c85400a3db8a77488bc8dc75e24162425b1845abff305238f

    • SSDEEP

      192:pUnA1CDX+0qxMQBCoZK0CibsJsJ0sMzV9VopTH:pUA1CDXixfCXG

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      eca460272800136da217dff3c8953df0

    • SHA1

      64e9ec022913d66b58ab5a8dbbfe7dd35d077824

    • SHA256

      fd74339ffd5a66781a333005f065a3978ca7916cc56e73ec9598262c72a33ff8

    • SHA512

      f92ccca98551fde68db761f58ac36e76319dde137dd0cff80f0f67f473412000ffba774074416e6907049c6b4c71ccbc853c33f4e489ba2b4f50badc2739b747

    • SSDEEP

      192:pKB8TmFxyTQdQbg9FkGuz9lhDGO8Fw+pzfVHAZT2K72dwF7dBG0XK:a8Tmr5dYQFkGUlqbpzfiT2+BG

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      eee580dbb537d88bc0a454e7fff0449a

    • SHA1

      f93b6d982ce8cfd76be9653731dbdc58cd42dac8

    • SHA256

      7e904bb840e2cac3305b4e057c9f90253a45b9dcf82b13e2622f98c4b38f1c8b

    • SHA512

      85c3356091eb527ea88a8e18dd3da739864c770466756e2600cd09903f2f61d12a223fe84ba95a58e034812fe2df4964781ecb90570cbc96a808aa75f81bd80f

    • SSDEEP

      48:q5ThpBdjVCUMLJeNXICmlm0YKH90JMpXSxDYm1Ou4PeR3RqG8aEJfABofEajLUM:yBZfM9eXmZ90JMcx0m1OtP2hWaajLUM

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      42a4d62f1d35922e1501775ce14f0d33

    • SHA1

      ba4b4c0229c598d05c32075c9d0d72b97e623b89

    • SHA256

      7535496fa53b0da966413ef2f7b56d7c9ddb0d5a1fa52d85ecb13637b775b38b

    • SHA512

      4e2ede93378f8e671c75c933a33ddfe961c7aebb1bf13a0a44efd8b737646e0e9405c8addd6f58970ff8363c6fa92869e39a6559ae3becf4c2e58187ee7c4a24

    • SSDEEP

      192:UpM3f5sTMzoU7Fs0+/tcDm0tzailQvzwTaoxs+/rH6hqCeHtpflVp/12YgsTwp:UpM3xcMzRF4/Gv+H+D6hqblA0Twp

    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks